Top Ransomware Groups Targeting Australia & NZ In 2025

This report outlines an elevated ransomware threat landscape in Australia and New Zealand during 2025: dozens of claimed attacks (71 claimed in Australia alone) by multiple ransomware groups have targeted healthcare, professional services, engineering, IT, pharmaceuticals and other sectors, with several incidents involving data exfiltration (tens to hundreds of GB, and in some cases published samples). The briefing names active groups (Akira, Qilin, Dragonforce, Lynx, Dragonforce, etc.), describes the nature of stolen data and sectors affected, notes potential supply-chain implications, and recommends resilience measures including segmentation, zero trust, immutable backups, and robust incident response.